last executing test programs: 40.054156148s ago: executing program 2 (id=113): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x7, &(0x7f00000000c0)=@raw=[@generic={0x1, 0x3, 0xb, 0x6, 0x3}, @exit, @tail_call], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 39.651208812s ago: executing program 2 (id=116): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0xfffffe74, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 39.41630026s ago: executing program 2 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000a00000014000780080011400000000005001500e9ffffff0500010006000000050005000a00000005000400010000000900020073797a320000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xc, 0x6}, 0x4580, 0x0, 0x8800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x15, 0x2000000, 'fo\x00', 0xc, 0x4, 0x7b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 36.933085106s ago: executing program 1 (id=126): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r3) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffc6, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100), 0x0) lseek(r4, 0x87, 0x1) getdents64(r4, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="090000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004a00003c0000000000069078ac1e0001ac141411890ba2ffffffffffffffff86060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800009fbc33012b837ca42cad68f33dd6535601505fd1068e85b4ff377331b02a50"], 0x0) 36.843976839s ago: executing program 2 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) 36.689035165s ago: executing program 2 (id=130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000000000000000ffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d4, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0xfffffff7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 36.052595827s ago: executing program 1 (id=133): sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x11) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 35.978391909s ago: executing program 1 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) 34.859245348s ago: executing program 1 (id=139): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x9, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0xeaf}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 34.713531033s ago: executing program 1 (id=141): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 34.429154982s ago: executing program 1 (id=145): syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0xfffffffd, 0x170}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000900)=""/174, 0xae}], 0x42}}], 0x2, 0x0, 0x0) 34.321187266s ago: executing program 2 (id=147): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r3) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffc6, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100), 0x0) lseek(r4, 0x87, 0x1) getdents64(r4, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="090000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004a00003c0000000000069078ac1e0001ac141411890ba2ffffffffffffffff86060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800009fbc33012b837ca42cad68f33dd6535601505fd1068e85b4ff377331b02a50"], 0x0) 34.180793371s ago: executing program 32 (id=147): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r3) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffc6, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100), 0x0) lseek(r4, 0x87, 0x1) getdents64(r4, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="090000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004a00003c0000000000069078ac1e0001ac141411890ba2ffffffffffffffff86060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800009fbc33012b837ca42cad68f33dd6535601505fd1068e85b4ff377331b02a50"], 0x0) 22.165467805s ago: executing program 5 (id=264): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff06ffff"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 20.242395152s ago: executing program 5 (id=277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 19.968232081s ago: executing program 5 (id=279): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) close(0x3) 19.887147444s ago: executing program 5 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) 19.845114526s ago: executing program 5 (id=283): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f00000003c0)='./file0\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 19.661603302s ago: executing program 5 (id=287): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r3) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffc6, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100), 0x0) lseek(r4, 0x87, 0x1) getdents64(r4, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="090000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004a00003c0000000000069078ac1e0001ac141411890ba2ffffffffffffffff86060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800009fbc33012b837ca42cad68f33dd6535601505fd1068e85b4ff377331b02a50d2"], 0x0) 19.621793993s ago: executing program 33 (id=287): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r3) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffc6, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100), 0x0) lseek(r4, 0x87, 0x1) getdents64(r4, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="090000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004a00003c0000000000069078ac1e0001ac141411890ba2ffffffffffffffff86060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800009fbc33012b837ca42cad68f33dd6535601505fd1068e85b4ff377331b02a50d2"], 0x0) 19.106521561s ago: executing program 0 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 19.082975202s ago: executing program 34 (id=145): syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0xfffffffd, 0x170}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000900)=""/174, 0xae}], 0x42}}], 0x2, 0x0, 0x0) 18.800801032s ago: executing program 0 (id=292): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f0000000540)=""/51, 0x33}], 0x8, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/144, 0x90}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/37, 0x25}, {&(0x7f0000000880)=""/6, 0x6}, {&(0x7f00000008c0)=""/73, 0x49}, {&(0x7f0000000940)=""/143, 0x8f}], 0x6, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rename(&(0x7f0000001140)='./file2\x00', &(0x7f0000001180)='./file2\x00') unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}) open(&(0x7f00000011c0)='./file0\x00', 0x103a00, 0x4) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x7) pipe2(&(0x7f0000000a80)={0xffffffffffffffff}, 0x80080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c296af344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707484df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a97769e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b82f87df7982b44b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb87b878f3e13187001bba6a401bd56f3f8eb5384e33"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) chmod(0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 17.493553307s ago: executing program 0 (id=298): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 14.082367034s ago: executing program 0 (id=310): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@session={'session', 0x3d, 0x32}}, {@mode}, {@uid}, {@check_strict}, {@cruft}, {@mode={'mode', 0x3d, 0x483}}, {@map_normal}, {@gid}]}, 0x0, 0x567, &(0x7f00000003c0)="$eJzs3V1v09YfwPGfS/snyl+q0JgQqgocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLaG8YN26Ttdvfb5V7E3hHaK5iYbCd9oHlYn7vu+4m2c2If+/yOE/mH0/hEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWG7FtvOW1I3XWlCDuZXAb2w/7W69Z4Hc3lUM6VfEiv+TTEaupouufr69+kr8vxmZTp9NSyYuMrL5/yuXHl4eH+ttPyTgffntgHta39h8sdTptF8fVSBn0LWLg9fVtGdC3zScmlYm9FW5VLLvzldDVTV1HS6GkW4oN9BO5Adq1r2t8uVyUencot/yahWnrnsLH9wp2HZJPco1tROEvnf3US505029brxa0iZeHbd5EL8RH5tIRdppKLWy2mkXRw0gbpT/J40KoxoV7EIhny8U8qX75fsPbHt8zwL7E7KnxdG9afHvdIRnb+Bwxrr5X+pixJOWLIjq+3ClIoH40hiwvquX/7+8q4f2uzP/97L81e3VU5Lk/+vps+uD8v+AWA70+Njrez9brcuGbMoLWZKOdKQtr/u1sg6y5+2jeoRjPPJHTbR4YiQUX4w0xEmWqO4SJWUpSUlseSrzUpVQlFTFSF20hLIooUSik3eUK4FocSQSXwJRMiuu3BYleSlLWYqiREtOFsWXlnhSk4o4yV5WZDU57kVR1sBjuCKXkkb5gcPI9l6hthSGjJb8j8M79DkbOCofe/kfAAAAAACcW1by6Xt8/T8h15Ja1dS1fdphAQAAAACAI5T85X86Libi2jWxuP4HAAAAAOC8sZJ77CwRycqNtLYiVnK7FB8CAAAAAABwTiR//78eF8kcKDfE2ppThet/AAAAAADOiR9GzrEfNi9af/wpQTBhvWsufGGtJXPzOmsX0u0ufLrHqDplTXZ3khSltBgfd/W0lUkbbU2C+aFbrIyKw9oOwNkK4Lv9BHB5XH6Sm2mbm8tpudxbk/aSrZq6zrl+/WFeHGdyLNIL0TcvV7+VZPg/eo1JKyOrnXbu2avOchLLu3gv79a6EyjumUdxSCxvkvkWknsu+o54IrkRo9tv1pKV1U7b3jn+sXTzsd09vp0c0ud7mUlbzXRnvM3uHn8m7jOfGzT6bhT5Q478vdxK29yavZUWfaIojIqisDOK/sfi8FEUR0VRPGQUAHBaVkZkIUv25N0DnOUOlt1ln9n9vcymbWankhPr+FSfM7o96oxuHzK7/b7nN5AG5di43593ZtVeOvh1YL9hvWDFh/DCm7Wv5cr6xuad1bWl5+3n7ZeFQrFk37Pt+wWZSIbRLcg9AIA+dv7GjtU3//da/PVL2nBv7r434qr6s62vFOTkmbySjizLXHK3QfKNg77/Isju+BrC3Iir1mySJtNfeJkbclX3v+Quh95+C0Pb7o6hePwvBAAAJ2hmRB62Rv8KnzU34rp7dy4ffnW83TZ/wkcCAID/Dh18sLLR91YQmObTfLmcd6J5rQLffawCU6lpZbxIB+6849W0agZ+5Lt+Pa48MRUdqrDVbPpBpKp+oJp+aBaS6QNV96ffQ91wvMi4vY+xXd+LHDdSFRO6qtn6qm7CeR0kG4dN7ZqqcZ3I+J4K/Vbg6pxSodY7GpqK9iJTNXHVU83ANJwgo5749VZDq4oO3cA0Iz/dYa8v41X9oJHsNnfKxxoAgLNifWPzxVKn0359jJW+HWdOfKgAAKBrRJYGAAAAAAAAAAAAAAAAAAAAAABnwEnc/0flZCrx63kqvfemgj4LB2G/lczZCOPsVUaeOt4e97kJwPH6OwAA///f0Erw") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 13.760772535s ago: executing program 0 (id=306): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x1, 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 12.917346674s ago: executing program 0 (id=308): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 12.322735755s ago: executing program 35 (id=308): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4.467585686s ago: executing program 8 (id=396): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 4.412414658s ago: executing program 3 (id=399): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 4.32926925s ago: executing program 3 (id=401): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 3.603292456s ago: executing program 8 (id=410): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 3.597761946s ago: executing program 7 (id=411): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xcc20, @empty}, 0x10) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 3.521460499s ago: executing program 7 (id=412): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f0000000400"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)}], 0x1}, 0x4048055) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d657461000000001400028008000140000000100800024000000005140000001100"], 0xf8}}, 0x0) 3.521009009s ago: executing program 7 (id=414): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff06ffff"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 3.519673879s ago: executing program 8 (id=415): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f00000005c0)=""/209, 0xd1}], 0x7, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/37, 0x25}, {&(0x7f0000000880)=""/6, 0x6}, {0x0}, {&(0x7f0000000940)=""/143, 0x8f}], 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) rename(&(0x7f0000001140)='./file2\x00', 0x0) unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, 0x0}) open(&(0x7f00000011c0)='./file0\x00', 0x103a00, 0x4) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x7) pipe2(&(0x7f0000000a80), 0x80080) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x40}}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.336984065s ago: executing program 3 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 2.829453872s ago: executing program 6 (id=419): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.492815514s ago: executing program 8 (id=420): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) close(r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000300)={[{@abort}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@jqfmt_vfsv1}, {@nodioread_nolock}, {@prjquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@grpjquota}]}, 0x4, 0x486, &(0x7f0000005500)="$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") getcwd(&(0x7f0000000d00)=""/138, 0x8a) 2.290628781s ago: executing program 6 (id=421): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 2.290493311s ago: executing program 4 (id=422): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.284751811s ago: executing program 8 (id=431): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x3ddd, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 1.991795921s ago: executing program 8 (id=423): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) 1.814540317s ago: executing program 3 (id=424): socket$kcm(0xa, 0x5, 0x0) eventfd(0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x10000, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.800006288s ago: executing program 4 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) 1.787050498s ago: executing program 7 (id=426): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) unshare(0x22020400) 1.673492152s ago: executing program 4 (id=427): socket$inet6(0xa, 0x6, 0xfffffff6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a0060803b0000", @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.673109562s ago: executing program 3 (id=428): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf73"}, {0x0, 0x1, "00e9ff06ffff"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r10, 0x0, 0x80) 1.634425643s ago: executing program 7 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f0000000580)=""/26, 0x1a, 0x10001, 0x0, 0x0) 1.600637915s ago: executing program 4 (id=430): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f00000005c0)=""/209, 0xd1}], 0x7, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/37, 0x25}, {&(0x7f0000000880)=""/6, 0x6}, {0x0}, {&(0x7f0000000940)=""/143, 0x8f}], 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) rename(&(0x7f0000001140)='./file2\x00', 0x0) unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, 0x0}) open(&(0x7f00000011c0)='./file0\x00', 0x103a00, 0x4) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x7) pipe2(&(0x7f0000000a80), 0x80080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x40}}, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.206740668s ago: executing program 7 (id=432): recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000980)=""/96, 0x60}], 0x2}, 0x77}, {{0x0, 0x0, &(0x7f0000004b80)=[{0x0}, {&(0x7f00000007c0)=""/14, 0xe}], 0x2}, 0x5}], 0x2, 0x10000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 657.394337ms ago: executing program 4 (id=433): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 656.741857ms ago: executing program 6 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 606.250339ms ago: executing program 6 (id=434): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 354.531488ms ago: executing program 6 (id=435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x12, 0x2, 0x0, 0x0, @binary="5eddc49329c010370b651f8355fd"}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0xfffffffffffffda1, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x4e22, 0x8001, 0x0, 0x80}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x3}, 0x70bd29, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21}}]}, 0x170}}, 0x0) 121.008496ms ago: executing program 6 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 120.745026ms ago: executing program 4 (id=437): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff06ffff"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 0s ago: executing program 3 (id=438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r1, 0x84, 0x7f, 0xfffffffffffffffe, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000) kernel console output (not intermixed with test programs): [ 24.488966][ T28] audit: type=1400 audit(1775086338.872:61): avc: denied { siginh } for pid=3202 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.966605][ T28] audit: type=1400 audit(1775086339.442:62): avc: denied { search } for pid=3207 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.014576][ T28] audit: type=1400 audit(1775086339.442:63): avc: denied { search } for pid=3207 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.064497][ T28] audit: type=1400 audit(1775086339.442:64): avc: denied { search } for pid=3207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.114491][ T28] audit: type=1400 audit(1775086339.442:65): avc: denied { search } for pid=3207 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.154468][ T28] audit: type=1400 audit(1775086339.442:66): avc: denied { read open } for pid=3208 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 33.505352][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 33.505376][ T28] audit: type=1400 audit(1775086347.982:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.535842][ T28] audit: type=1400 audit(1775086348.012:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.538237][ T3300] cgroup: Unknown subsys name 'net' [ 33.564012][ T28] audit: type=1400 audit(1775086348.042:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.685272][ T3300] cgroup: Unknown subsys name 'cpuset' [ 33.691601][ T3300] cgroup: Unknown subsys name 'rlimit' [ 33.823164][ T28] audit: type=1400 audit(1775086348.292:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.858116][ T28] audit: type=1400 audit(1775086348.302:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.879550][ T28] audit: type=1400 audit(1775086348.302:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.900068][ T28] audit: type=1400 audit(1775086348.302:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.915045][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.921483][ T28] audit: type=1400 audit(1775086348.312:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.955002][ T28] audit: type=1400 audit(1775086348.312:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.978779][ T28] audit: type=1400 audit(1775086348.322:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.987623][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.534608][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.595602][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.640183][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.650303][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.669648][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.676845][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.684090][ T3313] bridge_slave_0: entered allmulticast mode [ 35.691029][ T3313] bridge_slave_0: entered promiscuous mode [ 35.715723][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.722897][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.730545][ T3313] bridge_slave_1: entered allmulticast mode [ 35.737167][ T3313] bridge_slave_1: entered promiscuous mode [ 35.747990][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.807301][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.832881][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.840280][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.848059][ T3320] bridge_slave_0: entered allmulticast mode [ 35.855481][ T3320] bridge_slave_0: entered promiscuous mode [ 35.863312][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.893825][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.901173][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.908405][ T3320] bridge_slave_1: entered allmulticast mode [ 35.915167][ T3320] bridge_slave_1: entered promiscuous mode [ 35.929028][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.936557][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.943732][ T3312] bridge_slave_0: entered allmulticast mode [ 35.950642][ T3312] bridge_slave_0: entered promiscuous mode [ 35.962037][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.969367][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.976739][ T3312] bridge_slave_1: entered allmulticast mode [ 35.983482][ T3312] bridge_slave_1: entered promiscuous mode [ 35.996003][ T3313] team0: Port device team_slave_0 added [ 36.004976][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.012260][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.020020][ T3315] bridge_slave_0: entered allmulticast mode [ 36.027579][ T3315] bridge_slave_0: entered promiscuous mode [ 36.044570][ T3313] team0: Port device team_slave_1 added [ 36.051410][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.066464][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.073743][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.081045][ T3315] bridge_slave_1: entered allmulticast mode [ 36.087715][ T3315] bridge_slave_1: entered promiscuous mode [ 36.110431][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.130292][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.149508][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.157027][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.183857][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.195307][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.202543][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.209883][ T3319] bridge_slave_0: entered allmulticast mode [ 36.216954][ T3319] bridge_slave_0: entered promiscuous mode [ 36.224930][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.236155][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.256333][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.263580][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.290517][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.304668][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.311919][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.319479][ T3319] bridge_slave_1: entered allmulticast mode [ 36.326052][ T3319] bridge_slave_1: entered promiscuous mode [ 36.333720][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.348389][ T3320] team0: Port device team_slave_0 added [ 36.364261][ T3312] team0: Port device team_slave_0 added [ 36.376623][ T3320] team0: Port device team_slave_1 added [ 36.388388][ T3315] team0: Port device team_slave_0 added [ 36.395198][ T3312] team0: Port device team_slave_1 added [ 36.408204][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.418842][ T3315] team0: Port device team_slave_1 added [ 36.449327][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.468763][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.476005][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.502582][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.516027][ T3313] hsr_slave_0: entered promiscuous mode [ 36.522551][ T3313] hsr_slave_1: entered promiscuous mode [ 36.534024][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.541164][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.568676][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.580389][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.587515][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.614306][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.625630][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.633608][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.660460][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.683236][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.690770][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.717026][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.728137][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.735400][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.761608][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.781394][ T3319] team0: Port device team_slave_0 added [ 36.788631][ T3319] team0: Port device team_slave_1 added [ 36.810331][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.817833][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.844340][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.855965][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.863120][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.889885][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.940059][ T3312] hsr_slave_0: entered promiscuous mode [ 36.946422][ T3312] hsr_slave_1: entered promiscuous mode [ 36.952791][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.958758][ T3312] Cannot create hsr debugfs directory [ 36.982027][ T3315] hsr_slave_0: entered promiscuous mode [ 36.988128][ T3315] hsr_slave_1: entered promiscuous mode [ 36.994352][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 37.000141][ T3315] Cannot create hsr debugfs directory [ 37.025607][ T3320] hsr_slave_0: entered promiscuous mode [ 37.031959][ T3320] hsr_slave_1: entered promiscuous mode [ 37.038178][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.044000][ T3320] Cannot create hsr debugfs directory [ 37.087652][ T3319] hsr_slave_0: entered promiscuous mode [ 37.093782][ T3319] hsr_slave_1: entered promiscuous mode [ 37.100162][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.106096][ T3319] Cannot create hsr debugfs directory [ 37.264337][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.273292][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.285750][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.310063][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.335123][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.349587][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.361745][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.378730][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.395790][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.410711][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.420842][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.429956][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.475538][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.497196][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.515342][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.524990][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.547285][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.554604][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.563911][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.577282][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.596564][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.626292][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.639546][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.655006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.662872][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.675263][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.682764][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.701467][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.715582][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.730754][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.737980][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.760953][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.768097][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.785624][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.797575][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.808034][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.818690][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.848661][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.856110][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.865682][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.873208][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.913035][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.923835][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.937810][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.950994][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.971614][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.982283][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.989745][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.011020][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.026753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.034320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.066087][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.108539][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.115736][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.126344][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.133627][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.144828][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.205861][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.277340][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.345811][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.396275][ T3313] veth0_vlan: entered promiscuous mode [ 38.408000][ T3315] veth0_vlan: entered promiscuous mode [ 38.419442][ T3320] veth0_vlan: entered promiscuous mode [ 38.432406][ T3315] veth1_vlan: entered promiscuous mode [ 38.440311][ T3313] veth1_vlan: entered promiscuous mode [ 38.449115][ T3320] veth1_vlan: entered promiscuous mode [ 38.473030][ T3313] veth0_macvtap: entered promiscuous mode [ 38.496550][ T3315] veth0_macvtap: entered promiscuous mode [ 38.505884][ T3313] veth1_macvtap: entered promiscuous mode [ 38.526361][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.536084][ T3315] veth1_macvtap: entered promiscuous mode [ 38.551466][ T3320] veth0_macvtap: entered promiscuous mode [ 38.559773][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.577332][ T3320] veth1_macvtap: entered promiscuous mode [ 38.584353][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.593683][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.603004][ T3319] veth0_vlan: entered promiscuous mode [ 38.613417][ T3312] veth0_vlan: entered promiscuous mode [ 38.621892][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.631201][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.651764][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.665018][ T3319] veth1_vlan: entered promiscuous mode [ 38.672961][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.682585][ T3312] veth1_vlan: entered promiscuous mode [ 38.691755][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.691772][ T28] audit: type=1400 audit(1775086353.162:90): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.UekRZD/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.722883][ T28] audit: type=1400 audit(1775086353.182:91): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.743590][ T3319] veth0_macvtap: entered promiscuous mode [ 38.759377][ T28] audit: type=1400 audit(1775086353.182:92): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.UekRZD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.760138][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.788621][ T28] audit: type=1400 audit(1775086353.182:93): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.818117][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.818246][ T28] audit: type=1400 audit(1775086353.182:94): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.UekRZD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.840735][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.867807][ T28] audit: type=1400 audit(1775086353.182:95): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.UekRZD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.885261][ T3312] veth0_macvtap: entered promiscuous mode [ 38.902186][ T28] audit: type=1400 audit(1775086353.192:96): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.922116][ T28] audit: type=1400 audit(1775086353.202:97): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.948166][ T416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.955108][ T28] audit: type=1400 audit(1775086353.202:98): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.961766][ T416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.994979][ T3319] veth1_macvtap: entered promiscuous mode [ 39.002362][ T416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.012122][ T416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.012315][ T28] audit: type=1400 audit(1775086353.482:99): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.058608][ T3312] veth1_macvtap: entered promiscuous mode [ 39.067187][ T416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.079658][ T416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.107020][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.126312][ T416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.149974][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.163011][ T416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.181205][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.190765][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.201614][ T118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.210737][ T118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.234588][ T118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.243739][ T118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.262726][ T118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.292653][ T118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.312497][ T118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.333969][ T118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.459461][ T3502] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 39.562727][ T3510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.603018][ T3514] veth1_to_bond: entered allmulticast mode [ 39.655136][ T3523] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 39.688281][ T3528] veth1_to_bond: left allmulticast mode [ 39.818781][ T3536] atomic_op ffff88811aa56d28 conn xmit_atomic 0000000000000000 [ 40.011365][ T3546] bridge_slave_0: left allmulticast mode [ 40.017391][ T3546] bridge_slave_0: left promiscuous mode [ 40.023286][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.033551][ T3546] bridge_slave_1: left allmulticast mode [ 40.039872][ T3546] bridge_slave_1: left promiscuous mode [ 40.046504][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.058845][ T3546] bond0: (slave bond_slave_0): Releasing backup interface [ 40.069555][ T3546] bond0: (slave bond_slave_1): Releasing backup interface [ 40.082891][ T3546] team0: Port device team_slave_0 removed [ 40.092487][ T3546] team0: Port device team_slave_1 removed [ 40.100133][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.108775][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.117603][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.125823][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.135985][ T3546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.177564][ T3510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.228603][ T3554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 40.253039][ C1] hrtimer: interrupt took 50873 ns [ 40.273449][ T3557] capability: warning: `syz.2.31' uses 32-bit capabilities (legacy support in use) [ 40.302910][ T3559] mmap: syz.3.32 (3559) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.368820][ T3560] loop2: detected capacity change from 0 to 512 [ 40.448362][ T3560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.462492][ T3510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.509036][ T3560] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.576317][ T3555] loop0: detected capacity change from 0 to 2048 [ 40.608362][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.627141][ T3305] Alternate GPT is invalid, using primary GPT. [ 40.650856][ T3305] loop0: p2 p3 p7 [ 40.660013][ T3573] loop5: detected capacity change from 0 to 7 [ 40.747755][ T3510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.803216][ T3577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 40.833836][ T3577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 40.883502][ T3555] Alternate GPT is invalid, using primary GPT. [ 40.894664][ T3555] loop0: p2 p3 p7 [ 41.065138][ T3577] vxlan0: entered promiscuous mode [ 41.084817][ T3577] vxlan0: entered allmulticast mode [ 41.187110][ T416] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.197409][ T416] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.228942][ T416] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.240149][ T416] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.259637][ T3577] syz.2.38 (3577) used greatest stack depth: 9736 bytes left [ 41.270332][ T3589] netlink: 76 bytes leftover after parsing attributes in process `syz.3.42'. [ 41.312115][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.340176][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.353635][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.386351][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.430414][ T3605] loop1: detected capacity change from 0 to 512 [ 41.437591][ T3605] ======================================================= [ 41.437591][ T3605] WARNING: The mand mount option has been deprecated and [ 41.437591][ T3605] and is ignored by this kernel. Remove the mand [ 41.437591][ T3605] option from the mount to silence this warning. [ 41.437591][ T3605] ======================================================= [ 41.481875][ T3608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 41.562145][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.609515][ T3394] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.746608][ T3629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.61'. [ 41.760273][ T3613] netlink: 64 bytes leftover after parsing attributes in process `syz.3.54'. [ 41.783471][ T3613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 41.865156][ T3636] process 'syz.1.65' launched './file1' with NULL argv: empty string added [ 42.774612][ T3665] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.620958][ T3704] loop0: detected capacity change from 0 to 1024 [ 43.733422][ T3704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.765729][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 43.765744][ T28] audit: type=1400 audit(1775086358.242:243): avc: denied { add_name } for pid=3702 comm="syz.0.89" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.815623][ T28] audit: type=1400 audit(1775086358.292:244): avc: denied { create } for pid=3702 comm="syz.0.89" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.924678][ T28] audit: type=1326 audit(1775086358.392:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.3.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x0 [ 44.239559][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.253652][ T28] audit: type=1400 audit(1775086358.442:246): avc: denied { read write } for pid=3702 comm="syz.0.89" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.313537][ T28] audit: type=1400 audit(1775086358.442:247): avc: denied { open } for pid=3702 comm="syz.0.89" path="/18/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.384575][ T28] audit: type=1400 audit(1775086358.852:248): avc: denied { create } for pid=3718 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.418083][ T3725] loop2: detected capacity change from 0 to 2048 [ 44.466310][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.552480][ T28] audit: type=1400 audit(1775086358.872:249): avc: denied { write } for pid=3718 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.595169][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.697415][ T28] audit: type=1400 audit(1775086359.172:250): avc: denied { bpf } for pid=3735 comm="syz.2.97" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.981512][ T3745] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.098825][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 45.189699][ T28] audit: type=1400 audit(1775086359.222:251): avc: denied { perfmon } for pid=3735 comm="syz.2.97" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.211201][ T28] audit: type=1326 audit(1775086359.302:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.3.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x0 [ 45.400075][ T3752] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 45.414351][ T3752] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 45.573227][ T3752] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 46.325556][ T3747] bridge_slave_1: left allmulticast mode [ 46.331493][ T3747] bridge_slave_1: left promiscuous mode [ 46.338226][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.346610][ T3747] bridge_slave_0: left allmulticast mode [ 46.352433][ T3747] bridge_slave_0: left promiscuous mode [ 46.358637][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.400169][ T3421] IPVS: starting estimator thread 0... [ 46.494686][ T3760] IPVS: using max 2256 ests per chain, 112800 per kthread [ 48.802812][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 48.802842][ T28] audit: type=1326 audit(1775086363.272:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.1.117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84f74ac819 code=0x0 [ 49.590110][ T23] IPVS: starting estimator thread 0... [ 50.821943][ T3809] IPVS: using max 2256 ests per chain, 112800 per kthread [ 50.978917][ T28] audit: type=1400 audit(1775086365.452:265): avc: denied { module_request } for pid=3815 comm="syz.0.122" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.349329][ T28] audit: type=1400 audit(1775086365.822:266): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.609593][ T28] audit: type=1326 audit(1775086366.082:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.0.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69890ac819 code=0x0 [ 51.785966][ T3843] loop3: detected capacity change from 0 to 512 [ 53.063916][ T3438] IPVS: starting estimator thread 0... [ 53.078040][ T28] audit: type=1400 audit(1775086367.552:268): avc: denied { connect } for pid=3860 comm="syz.0.138" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.245509][ T3859] IPVS: using max 2256 ests per chain, 112800 per kthread [ 53.254577][ T28] audit: type=1326 audit(1775086367.592:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.3.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x0 [ 53.311777][ T118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.387211][ T118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.437960][ T28] audit: type=1400 audit(1775086367.912:270): avc: denied { search } for pid=3870 comm="syz.3.142" name="/" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.510370][ T118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.554526][ T28] audit: type=1400 audit(1775086367.912:271): avc: denied { search } for pid=3870 comm="syz.3.142" name="/" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.587694][ T118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.679724][ T28] audit: type=1400 audit(1775086367.912:272): avc: denied { read open } for pid=3870 comm="syz.3.142" path="/" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.830357][ T118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.872425][ T118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.116939][ T28] audit: type=1400 audit(1775086368.082:273): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.489008][ T118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.616123][ T118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.643364][ T3889] loop0: detected capacity change from 0 to 512 [ 54.735798][ T3889] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.150: corrupted in-inode xattr: invalid ea_ino [ 54.775701][ T3889] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.780210][ T3889] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.150: couldn't read orphan inode 15 (err -117) [ 54.789981][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 54.790005][ C0] EXT4-fs (loop0): initial error at time 1775086369: ext4_iget_extra_inode:5040: inode 15 [ 54.790051][ C0] EXT4-fs (loop0): last error at time 1775086369: ext4_iget_extra_inode:5040: inode 15 [ 54.828620][ T3889] loop0: lost filesystem error report for type 5 error -117 [ 54.829422][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.935095][ T28] audit: type=1400 audit(1775086369.392:274): avc: denied { read append open } for pid=3888 comm="syz.0.150" path=2F32392F66696C65302F66696C65302F07 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.965177][ T118] bridge_slave_1: left allmulticast mode [ 54.971028][ T118] bridge_slave_1: left promiscuous mode [ 55.014873][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.534471][ T28] audit: type=1400 audit(1775086369.402:275): avc: denied { create } for pid=3888 comm="syz.0.150" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.574734][ T28] audit: type=1326 audit(1775086369.622:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f433ddbc819 code=0x0 [ 55.662419][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.672417][ T118] bridge_slave_0: left allmulticast mode [ 55.678430][ T118] bridge_slave_0: left promiscuous mode [ 55.692114][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.706426][ T28] audit: type=1400 audit(1775086370.172:277): avc: denied { sqpoll } for pid=3922 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.813593][ T3926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.155'. [ 55.826823][ T3926] unsupported nlmsg_type 40 [ 55.927463][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.945857][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.971304][ T118] bond0 (unregistering): Released all slaves [ 56.004678][ T28] audit: type=1400 audit(1775086370.472:278): avc: denied { name_connect } for pid=3932 comm="syz.0.158" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 56.088074][ T118] hsr_slave_0: left promiscuous mode [ 56.106712][ T118] hsr_slave_1: left promiscuous mode [ 56.112475][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.120633][ T28] audit: type=1400 audit(1775086370.592:279): avc: denied { mounton } for pid=3936 comm="syz.0.159" path="/proc/84/task" dev="proc" ino=7399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.130751][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.175824][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.194715][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.216361][ T28] audit: type=1326 audit(1775086370.682:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 56.240558][ T28] audit: type=1326 audit(1775086370.682:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 56.254863][ T118] veth1_macvtap: left promiscuous mode [ 56.278419][ T28] audit: type=1326 audit(1775086370.692:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 56.285258][ T118] veth0_macvtap: left promiscuous mode [ 56.326317][ T118] veth1_vlan: left promiscuous mode [ 56.332177][ T118] veth0_vlan: left promiscuous mode [ 56.549027][ T118] team0 (unregistering): Port device team_slave_1 removed [ 56.576226][ T118] team0 (unregistering): Port device team_slave_0 removed [ 56.815651][ T3969] syzkaller0: entered promiscuous mode [ 56.821301][ T3969] syzkaller0: entered allmulticast mode [ 57.397009][ T118] IPVS: stop unused estimator thread 0... [ 57.506707][ T3892] chnl_net:caif_netlink_parms(): no params data found [ 57.679608][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 57.726307][ T3892] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.865229][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.884911][ T3892] bridge_slave_0: entered allmulticast mode [ 57.897608][ T3892] bridge_slave_0: entered promiscuous mode [ 57.913128][ T3892] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.929534][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.944956][ T3892] bridge_slave_1: entered allmulticast mode [ 57.982629][ T3892] bridge_slave_1: entered promiscuous mode [ 58.196053][ T3892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.235307][ T3892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.299382][ T3892] team0: Port device team_slave_0 added [ 58.319383][ T3892] team0: Port device team_slave_1 added [ 58.362295][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 58.389055][ T3892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.421174][ T3892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.474493][ T3892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.495243][ T3892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.514455][ T3892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.598476][ T3892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.643296][ T4059] hsr_slave_1 (unregistering): left promiscuous mode [ 58.689001][ T4073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.188'. [ 59.006501][ T3892] hsr_slave_0: entered promiscuous mode [ 59.076886][ T3892] hsr_slave_1: entered promiscuous mode [ 59.158705][ T3892] debugfs: 'hsr0' already exists in 'hsr' [ 59.228562][ T3892] Cannot create hsr debugfs directory [ 59.317546][ T4078] loop0: detected capacity change from 0 to 128 [ 59.779024][ T4087] sch_tbf: burst 1402 is lower than device syzkaller0 mtu (1514) ! [ 59.802688][ T3892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.824323][ T3892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.844741][ T3892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.865197][ T3892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.955748][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.985221][ T3892] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.009369][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.016536][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.037046][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.044776][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.196585][ T3892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.450779][ T3892] veth0_vlan: entered promiscuous mode [ 60.487638][ T3892] veth1_vlan: entered promiscuous mode [ 60.538575][ T3892] veth0_macvtap: entered promiscuous mode [ 60.546247][ T4116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 60.559078][ T4116] netlink: 'syz.3.197': attribute type 7 has an invalid length. [ 60.573673][ T3892] veth1_macvtap: entered promiscuous mode [ 60.579739][ T4116] netlink: 'syz.3.197': attribute type 8 has an invalid length. [ 60.613664][ T3892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.634641][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 60.648630][ T3892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.667538][ T2111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.683293][ T2111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.737535][ T4125] gretap1: entered promiscuous mode [ 60.756312][ T2111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.785129][ T2111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.929886][ T4136] loop3: detected capacity change from 0 to 4096 [ 60.951741][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.968364][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 60.968378][ T28] audit: type=1400 audit(1775086375.442:334): avc: denied { setattr } for pid=4135 comm="syz.3.206" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.002806][ T4136] capability: warning: `syz.3.206' uses deprecated v2 capabilities in a way that may be insecure [ 61.015144][ T28] audit: type=1400 audit(1775086375.492:335): avc: denied { add_name } for pid=4135 comm="syz.3.206" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.115027][ T4138] loop0: detected capacity change from 0 to 4096 [ 61.136787][ T4138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.151981][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.207584][ T28] audit: type=1400 audit(1775086375.672:336): avc: denied { ioctl } for pid=4137 comm="syz.0.207" path="/46/file0/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.365689][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.394909][ T4145] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 61.402059][ T10] IPVS: starting estimator thread 0... [ 61.441241][ T28] audit: type=1400 audit(1775086375.912:337): avc: denied { create } for pid=4150 comm="syz.5.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.465693][ T4151] Zero length message leads to an empty skb [ 61.494494][ T4149] IPVS: using max 2256 ests per chain, 112800 per kthread [ 61.502180][ T28] audit: type=1400 audit(1775086375.942:338): avc: denied { write } for pid=4150 comm="syz.5.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.700839][ T28] audit: type=1400 audit(1775086376.172:339): avc: denied { ioctl } for pid=4162 comm="syz.3.216" path="socket:[8152]" dev="sockfs" ino=8152 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 61.818742][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.219'. [ 61.885843][ T4174] netlink: 'syz.3.221': attribute type 83 has an invalid length. [ 62.167322][ T4170] hsr_slave_1 (unregistering): left promiscuous mode [ 62.255147][ T4181] netlink: 32 bytes leftover after parsing attributes in process `syz.4.223'. [ 62.360447][ T4186] loop4: detected capacity change from 0 to 128 [ 62.703274][ T4188] syzkaller0: entered allmulticast mode [ 62.723494][ T4188] syzkaller0: entered promiscuous mode [ 62.743202][ T4188] syzkaller0 (unregistering): left allmulticast mode [ 62.764733][ T4188] syzkaller0 (unregistering): left promiscuous mode [ 62.853891][ T4192] loop3: detected capacity change from 0 to 128 [ 63.002730][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.002730][ T36] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 63.045235][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.045235][ T36] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 63.080501][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.080501][ T36] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 63.114527][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.114527][ T36] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 63.137569][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.137569][ T36] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 63.175471][ T4199] loop0: detected capacity change from 0 to 2048 [ 63.195851][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.195851][ T36] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 63.224699][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.224699][ T36] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 63.239843][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.252281][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.252281][ T36] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 63.252341][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.252341][ T36] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 63.252381][ T36] kworker/u8:2: attempt to access beyond end of device [ 63.252381][ T36] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 63.299840][ T28] audit: type=1400 audit(1775086377.772:340): avc: denied { map } for pid=4198 comm="syz.0.232" path="/52/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.335912][ T28] audit: type=1400 audit(1775086377.772:341): avc: denied { execute } for pid=4198 comm="syz.0.232" path="/52/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.564805][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.705461][ T4221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.714695][ T28] audit: type=1400 audit(1775086378.182:342): avc: denied { read } for pid=4224 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.745385][ T4221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.085034][ T4242] loop3: detected capacity change from 0 to 128 [ 64.540023][ T28] audit: type=1400 audit(1775086379.012:343): avc: denied { name_bind } for pid=4254 comm="syz.5.251" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.689090][ T4263] loop5: detected capacity change from 0 to 512 [ 64.714950][ T4263] EXT4-fs: Ignoring removed nobh option [ 64.750740][ T4263] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.758629][ T4263] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.253: EA inode hash validation failed [ 64.772129][ T4263] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.787056][ T4263] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.253: corrupted inode contents [ 64.799452][ T4263] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.800109][ T4263] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.253: mark_inode_dirty error [ 64.809539][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 64.809559][ C0] EXT4-fs (loop5): initial error at time 1775086379: ext4_do_update_inode:5602: inode 15 [ 64.809594][ C0] EXT4-fs (loop5): last error at time 1775086379: ext4_do_update_inode:5602: inode 15 [ 64.854312][ T4263] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.859774][ T4263] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.253: corrupted inode contents [ 64.925707][ T4273] loop0: detected capacity change from 0 to 512 [ 64.928849][ T4263] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.992947][ T4263] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.253: mark_inode_dirty error [ 65.044508][ T4263] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.044788][ T4263] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.253: mark inode dirty (error -117) [ 65.070434][ T4263] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.080890][ T4263] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 65.101892][ T4273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.280551][ T4263] EXT4-fs (loop5): 1 orphan inode deleted [ 65.389140][ T4263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 65.588272][ T4263] netlink: 96 bytes leftover after parsing attributes in process `syz.5.253'. [ 65.609472][ T4260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.253'. [ 65.639730][ T3892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.695256][ T4288] loop5: detected capacity change from 0 to 2048 [ 65.728314][ T4288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.890345][ T3892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.933324][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.101340][ T4303] netlink: 104 bytes leftover after parsing attributes in process `syz.3.268'. [ 66.178299][ T4297] loop5: detected capacity change from 0 to 512 [ 66.390064][ T4297] EXT4-fs: Ignoring removed nobh option [ 66.723139][ T4314] io-wq is not configured for unbound workers [ 66.728197][ T4297] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.752877][ T4297] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.264: EA inode hash validation failed [ 66.779341][ T4297] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.264: corrupted inode contents [ 66.804698][ T4297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.814528][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 66.830460][ C1] EXT4-fs (loop5): initial error at time 1775086381: ext4_do_update_inode:5602: inode 15 [ 66.840729][ C1] EXT4-fs (loop5): last error at time 1775086381: ext4_do_update_inode:5602: inode 15 [ 66.845180][ T4297] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.264: mark_inode_dirty error [ 66.878856][ T4297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.885059][ T4297] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.264: corrupted inode contents [ 66.945293][ T4297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.946599][ T4297] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.264: mark_inode_dirty error [ 67.004592][ T4297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.005968][ T4297] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.264: mark inode dirty (error -117) [ 67.045797][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 67.045816][ T28] audit: type=1400 audit(1775086381.522:347): avc: denied { accept } for pid=4319 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.047110][ T4297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.064493][ T28] audit: type=1400 audit(1775086381.522:348): avc: denied { read } for pid=4319 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.291025][ T4297] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 67.318465][ T4297] EXT4-fs (loop5): 1 orphan inode deleted [ 67.424115][ T4297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.597747][ T28] audit: type=1326 audit(1775086381.702:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.4.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f433ddbc819 code=0x0 [ 67.669228][ T4297] netlink: 96 bytes leftover after parsing attributes in process `syz.5.264'. [ 67.691538][ T4297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.264'. [ 67.714562][ T4326] loop0: detected capacity change from 0 to 128 [ 67.721230][ T4329] loop4: detected capacity change from 0 to 512 [ 67.778603][ T4329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.805923][ T4330] loop3: detected capacity change from 0 to 4096 [ 67.837437][ T3892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.848193][ T4330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.958784][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.019407][ T4336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.277'. [ 68.101261][ T4342] bio_check_eod: 120 callbacks suppressed [ 68.101282][ T4342] syz.0.286: attempt to access beyond end of device [ 68.101282][ T4342] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 68.377249][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.397674][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.213568][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.357758][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.374524][ T28] audit: type=1400 audit(1775086383.902:350): avc: denied { getattr } for pid=4382 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.433715][ T28] audit: type=1326 audit(1775086384.012:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.0.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69890ac819 code=0x0 [ 70.567843][ T28] audit: type=1400 audit(1775086384.052:352): avc: denied { read } for pid=4387 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.591143][ T28] audit: type=1400 audit(1775086384.052:353): avc: denied { open } for pid=4387 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.616673][ T28] audit: type=1326 audit(1775086384.422:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.4.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f433ddbc819 code=0x0 [ 70.642409][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.653193][ T28] audit: type=1400 audit(1775086384.552:355): avc: denied { create } for pid=4377 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.653227][ T28] audit: type=1400 audit(1775086384.552:356): avc: denied { write } for pid=4377 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.467127][ T4359] chnl_net:caif_netlink_parms(): no params data found [ 71.521929][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 71.584281][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.604819][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.612234][ T4359] bridge_slave_0: entered allmulticast mode [ 71.619277][ T4359] bridge_slave_0: entered promiscuous mode [ 71.672474][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.681030][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.689128][ T4359] bridge_slave_1: entered allmulticast mode [ 71.696311][ T4359] bridge_slave_1: entered promiscuous mode [ 71.731612][ T36] bridge_slave_1: left allmulticast mode [ 71.737515][ T36] bridge_slave_1: left promiscuous mode [ 71.743251][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.751639][ T36] bridge_slave_0: left allmulticast mode [ 71.757491][ T36] bridge_slave_0: left promiscuous mode [ 71.763305][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.858125][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.868914][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.878986][ T36] bond0 (unregistering): Released all slaves [ 71.888666][ T4359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.899914][ T4359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.922521][ T36] hsr_slave_0: left promiscuous mode [ 71.928463][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.936217][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.944093][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.951886][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.963419][ T36] veth1_macvtap: left promiscuous mode [ 71.969090][ T36] veth0_macvtap: left promiscuous mode [ 71.975075][ T36] veth1_vlan: left promiscuous mode [ 71.980665][ T36] veth0_vlan: left promiscuous mode [ 72.047605][ T36] team0 (unregistering): Port device team_slave_1 removed [ 72.058045][ T36] team0 (unregistering): Port device team_slave_0 removed [ 72.102386][ T4359] team0: Port device team_slave_0 added [ 72.113578][ T4359] team0: Port device team_slave_1 added [ 72.125207][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.132561][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.140262][ T4363] bridge_slave_0: entered allmulticast mode [ 72.147154][ T4363] bridge_slave_0: entered promiscuous mode [ 72.154291][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.161451][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.169244][ T4363] bridge_slave_1: entered allmulticast mode [ 72.176319][ T4363] bridge_slave_1: entered promiscuous mode [ 72.188970][ T4359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.196759][ T4359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.225326][ T4359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.241918][ T4359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.249203][ T4359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.276370][ T4359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.297344][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.308281][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.333594][ T4363] team0: Port device team_slave_0 added [ 72.340902][ T4363] team0: Port device team_slave_1 added [ 72.359861][ T4359] hsr_slave_0: entered promiscuous mode [ 72.366445][ T4359] hsr_slave_1: entered promiscuous mode [ 72.372837][ T4359] debugfs: 'hsr0' already exists in 'hsr' [ 72.379157][ T4359] Cannot create hsr debugfs directory [ 72.397470][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.405164][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.434701][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.448206][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.456422][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.483074][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.546214][ T4363] hsr_slave_0: entered promiscuous mode [ 72.552691][ T4363] hsr_slave_1: entered promiscuous mode [ 72.560523][ T4363] debugfs: 'hsr0' already exists in 'hsr' [ 72.567078][ T4363] Cannot create hsr debugfs directory [ 72.595573][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.662886][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.680173][ T4359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 72.697601][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.711851][ T4359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.729222][ T4359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.747309][ T4359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.758789][ T4363] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.771270][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.782904][ T4363] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.797505][ T4363] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.812986][ T4363] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.876940][ T36] bridge_slave_1: left allmulticast mode [ 72.882667][ T36] bridge_slave_1: left promiscuous mode [ 72.889362][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.897730][ T36] bridge_slave_0: left allmulticast mode [ 72.903549][ T36] bridge_slave_0: left promiscuous mode [ 72.909770][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.016774][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.027301][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.037509][ T36] bond0 (unregistering): Released all slaves [ 73.077680][ T4359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.098097][ T4359] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.112072][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.119480][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.133185][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.140679][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.160345][ T36] hsr_slave_0: left promiscuous mode [ 73.167541][ T36] hsr_slave_1: left promiscuous mode [ 73.173627][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.181480][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.189514][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.197753][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.208930][ T36] veth1_macvtap: left promiscuous mode [ 73.214850][ T36] veth0_macvtap: left promiscuous mode [ 73.220771][ T36] veth1_vlan: left promiscuous mode [ 73.226541][ T36] veth0_vlan: left promiscuous mode [ 73.307540][ T36] team0 (unregistering): Port device team_slave_1 removed [ 73.320061][ T36] team0 (unregistering): Port device team_slave_0 removed [ 73.358930][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.381075][ T4359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.400704][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.412390][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.419851][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.432293][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.439952][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.506449][ T4359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.540388][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.702356][ T4359] veth0_vlan: entered promiscuous mode [ 73.721580][ T4359] veth1_vlan: entered promiscuous mode [ 73.740768][ T4359] veth0_macvtap: entered promiscuous mode [ 73.753623][ T4359] veth1_macvtap: entered promiscuous mode [ 73.766801][ T4363] veth0_vlan: entered promiscuous mode [ 73.775766][ T4363] veth1_vlan: entered promiscuous mode [ 73.788340][ T4359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.802364][ T4359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.814798][ T4363] veth0_macvtap: entered promiscuous mode [ 73.825145][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845006][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.854875][ T4363] veth1_macvtap: entered promiscuous mode [ 73.872419][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.888561][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.899872][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.912064][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.928733][ T4395] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.966696][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.983228][ T4616] loop0: detected capacity change from 0 to 164 [ 73.991083][ T4614] x_tables: unsorted underflow at hook 3 [ 74.000463][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.032727][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.041923][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 74.041939][ T28] audit: type=1400 audit(1775086388.502:361): avc: denied { mount } for pid=4613 comm="syz.0.310" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 74.122587][ T4623] loop6: detected capacity change from 0 to 128 [ 74.275095][ T28] audit: type=1400 audit(1775086388.752:362): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 74.297734][ T3312] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 74.363712][ T3312] ISOFS: unable to read i-node block [ 74.373394][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.432528][ T3312] ISOFS: unable to read i-node block [ 74.447715][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.705544][ T28] audit: type=1326 audit(1775086389.122:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.7.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48d53fc819 code=0x0 [ 75.147771][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.147771][ T50] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 75.260913][ T28] audit: type=1326 audit(1775086389.702:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f433ddbc819 code=0x0 [ 75.383129][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.383129][ T50] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 75.418834][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.418834][ T50] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 75.468503][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.468503][ T50] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 75.602171][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.602171][ T50] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 75.653988][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.653988][ T50] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 75.692706][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.692706][ T50] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 75.719381][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.720615][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.720615][ T50] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 75.746912][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.746912][ T50] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 75.824787][ T50] kworker/u8:3: attempt to access beyond end of device [ 75.824787][ T50] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 75.886273][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.920427][ T28] audit: type=1400 audit(1775086390.392:365): avc: denied { cpu } for pid=4674 comm="syz.6.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 75.974692][ T28] audit: type=1400 audit(1775086390.422:366): avc: denied { allowed } for pid=4685 comm="syz.7.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.131940][ T28] audit: type=1400 audit(1775086390.602:367): avc: denied { mount } for pid=4700 comm="syz.7.321" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.176931][ T28] audit: type=1400 audit(1775086390.602:368): avc: denied { search } for pid=4700 comm="syz.7.321" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.248818][ T28] audit: type=1400 audit(1775086390.602:369): avc: denied { search } for pid=4700 comm="syz.7.321" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.293246][ T28] audit: type=1400 audit(1775086390.602:370): avc: denied { read open } for pid=4700 comm="syz.7.321" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.368779][ T4676] chnl_net:caif_netlink_parms(): no params data found [ 76.449801][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.460555][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.468665][ T4676] bridge_slave_0: entered allmulticast mode [ 76.475849][ T4676] bridge_slave_0: entered promiscuous mode [ 76.483251][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.491067][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.498593][ T4676] bridge_slave_1: entered allmulticast mode [ 76.505964][ T4676] bridge_slave_1: entered promiscuous mode [ 76.527251][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.538390][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.561148][ T4676] team0: Port device team_slave_0 added [ 76.569863][ T4676] team0: Port device team_slave_1 added [ 76.589706][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.597137][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.624218][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.636490][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.644383][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.671237][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.783402][ T4736] loop6: detected capacity change from 0 to 512 [ 76.826429][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.837835][ T4736] EXT4-fs: Ignoring removed nobh option [ 76.876842][ T4744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 76.887986][ T4736] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.905183][ T4736] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 76.928794][ T4676] hsr_slave_0: entered promiscuous mode [ 76.937846][ T4676] hsr_slave_1: entered promiscuous mode [ 76.944350][ T4676] debugfs: 'hsr0' already exists in 'hsr' [ 76.944324][ T4736] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.951123][ T4676] Cannot create hsr debugfs directory [ 76.982979][ T4736] EXT4-fs (loop6): 1 truncate cleaned up [ 76.999020][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.063719][ T4736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.119227][ T58] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.129667][ T58] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.186534][ T58] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.214025][ T58] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.327292][ T36] bridge_slave_1: left allmulticast mode [ 77.345413][ T36] bridge_slave_1: left promiscuous mode [ 77.354831][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.371655][ T36] bridge_slave_0: left allmulticast mode [ 77.382901][ T36] bridge_slave_0: left promiscuous mode [ 77.389989][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.526232][ T4791] loop4: detected capacity change from 0 to 512 [ 77.533134][ T4791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.567287][ T4791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.600786][ T4791] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.704295][ T4359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.714841][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.725396][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.745852][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.755863][ T36] bond0 (unregistering): Released all slaves [ 77.766154][ T4676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 77.796994][ T4676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 77.815509][ T4676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.656893][ T4676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.678200][ T36] hsr_slave_0: left promiscuous mode [ 78.684625][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.692058][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.745512][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.772669][ T4813] loop7: detected capacity change from 0 to 128 [ 78.774858][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.790320][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.814633][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.872630][ T36] veth1_macvtap: left promiscuous mode [ 78.878556][ T36] veth0_macvtap: left promiscuous mode [ 78.894676][ T36] veth1_vlan: left promiscuous mode [ 78.900296][ T36] veth0_vlan: left promiscuous mode [ 79.108870][ T36] team0 (unregistering): Port device team_slave_1 removed [ 79.128960][ T36] team0 (unregistering): Port device team_slave_0 removed [ 79.291311][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.330620][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.350556][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.358039][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.376954][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.384352][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.532774][ T4846] netlink: 76 bytes leftover after parsing attributes in process `syz.4.358'. [ 79.620967][ T36] IPVS: stop unused estimator thread 0... [ 79.744477][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 79.744498][ T28] audit: type=1400 audit(1775086394.192:378): avc: denied { mounton } for pid=4864 comm="syz.4.361" path="/86/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.781773][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.912048][ T4879] loop4: detected capacity change from 0 to 512 [ 79.926082][ T4880] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.971175][ T4879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.001339][ T4880] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.034756][ T4879] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.076895][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.109474][ T4880] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.169230][ T4880] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.189630][ T4676] veth0_vlan: entered promiscuous mode [ 80.226150][ T4676] veth1_vlan: entered promiscuous mode [ 80.240662][ T118] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.259783][ T118] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.283205][ T118] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.293820][ T4676] veth0_macvtap: entered promiscuous mode [ 80.301734][ T4676] veth1_macvtap: entered promiscuous mode [ 80.310093][ T118] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.348663][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.355765][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.360821][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.391121][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.500389][ T2111] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.511708][ T2111] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.541886][ T2111] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.563947][ T28] audit: type=1400 audit(1775086395.032:379): avc: denied { mounton } for pid=4676 comm="syz-executor" path="/root/syzkaller.JnS7Yg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 80.574112][ T2111] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.667719][ T4930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.370'. [ 80.681669][ T10] IPVS: starting estimator thread 0... [ 80.794812][ T4931] IPVS: using max 2208 ests per chain, 110400 per kthread [ 82.217741][ T4971] loop3: detected capacity change from 0 to 128 [ 82.301284][ T28] audit: type=1400 audit(1775086396.772:380): avc: denied { setopt } for pid=4974 comm="syz.6.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.385387][ T4973] loop8: detected capacity change from 0 to 128 [ 82.632161][ T28] audit: type=1326 audit(1775086397.102:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 82.832017][ T28] audit: type=1326 audit(1775086397.102:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 82.910674][ T28] audit: type=1326 audit(1775086397.132:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 82.992107][ T28] audit: type=1326 audit(1775086397.172:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 83.081164][ T28] audit: type=1326 audit(1775086397.172:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 83.143441][ T28] audit: type=1326 audit(1775086397.172:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 83.183773][ T118] bio_check_eod: 43 callbacks suppressed [ 83.183789][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.183789][ T118] loop8: rw=1, sector=145, nr_sectors = 8 limit=128 [ 83.210381][ T28] audit: type=1326 audit(1775086397.172:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6dd3c819 code=0x7ffc0000 [ 83.237998][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.237998][ T118] loop8: rw=1, sector=161, nr_sectors = 8 limit=128 [ 83.258713][ T5000] loop7: detected capacity change from 0 to 512 [ 83.265417][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.265417][ T118] loop8: rw=1, sector=177, nr_sectors = 8 limit=128 [ 83.280383][ T5000] EXT4-fs: Ignoring removed nobh option [ 83.291453][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.291453][ T118] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 83.311532][ T5000] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 83.334698][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.334698][ T118] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 83.348985][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.348985][ T118] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 83.364078][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.364078][ T118] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 83.378057][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.378057][ T118] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 83.392629][ T5000] EXT4-fs (loop7): 1 truncate cleaned up [ 83.400195][ T5000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.414512][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.414512][ T118] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 83.429026][ T118] kworker/u8:5: attempt to access beyond end of device [ 83.429026][ T118] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 83.822408][ T5030] loop3: detected capacity change from 0 to 128 [ 84.173718][ T4363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.867337][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 84.867365][ T28] audit: type=1400 audit(1775086399.322:466): avc: denied { getopt } for pid=5068 comm="syz.8.415" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.250090][ T5066] loop7: detected capacity change from 0 to 512 [ 85.281498][ T5066] EXT4-fs: Ignoring removed nobh option [ 85.290456][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.419'. [ 85.302721][ T5066] EXT4-fs (loop7): orphan cleanup on readonly fs [ 85.319013][ T5066] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.414: EA inode hash validation failed [ 85.336214][ T5066] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.363578][ T5089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.419'. [ 85.366529][ T5066] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.414: corrupted inode contents [ 85.390415][ T5066] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.394511][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 85.411643][ C1] EXT4-fs (loop7): initial error at time 1775086399: ext4_do_update_inode:5602: inode 15 [ 85.423369][ C1] EXT4-fs (loop7): last error at time 1775086399: ext4_do_update_inode:5602: inode 15 [ 85.435903][ T5066] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #15: comm syz.7.414: mark_inode_dirty error [ 85.449210][ T5066] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.491214][ T5066] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.414: corrupted inode contents [ 85.582128][ T5066] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.596419][ T5089] vxlan0: entered promiscuous mode [ 85.613609][ T5066] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.414: mark_inode_dirty error [ 85.630416][ T5089] vxlan0: entered allmulticast mode [ 85.654853][ T5066] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.656185][ T5066] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.414: mark inode dirty (error -117) [ 85.700394][ T5066] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.708010][ T5066] EXT4-fs warning (device loop7): ext4_evict_inode:285: xattr delete (err -117) [ 85.758499][ T5108] loop4: detected capacity change from 0 to 512 [ 85.769369][ T5066] EXT4-fs (loop7): 1 orphan inode deleted [ 85.769850][ T58] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.809538][ T5066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.831254][ T58] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.841041][ T5108] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.422: inode has both inline data and extents flags [ 85.893567][ T5108] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.893748][ T5108] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.422: couldn't read orphan inode 15 (err -117) [ 85.903745][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 85.903777][ C0] EXT4-fs (loop4): initial error at time 1775086400: ext4_orphan_get:1397: inode 15 [ 85.903802][ C0] EXT4-fs (loop4): last error at time 1775086400: ext4_orphan_get:1397: inode 15 [ 85.972097][ T58] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.983854][ T5108] loop4: lost filesystem error report for type 5 error -117 [ 85.984921][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.006940][ T58] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.087080][ T28] audit: type=1400 audit(1775086400.562:467): avc: denied { map } for pid=5104 comm="syz.4.422" path="/105/file0/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.124331][ T5066] netlink: 96 bytes leftover after parsing attributes in process `syz.7.414'. [ 86.147372][ T28] audit: type=1400 audit(1775086400.562:468): avc: denied { write } for pid=5104 comm="syz.4.422" path="/105/file0/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.236823][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.248677][ T4363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.422575][ T5129] loop3: detected capacity change from 0 to 512 [ 86.464190][ T5129] EXT4-fs: Ignoring removed nobh option [ 86.578944][ T5129] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.594801][ T5129] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.428: EA inode hash validation failed [ 86.787391][ T5129] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.428: corrupted inode contents [ 86.955459][ T5129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.955952][ T5129] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.428: mark_inode_dirty error [ 86.965659][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 86.965675][ C1] EXT4-fs (loop3): initial error at time 1775086401: ext4_do_update_inode:5602: inode 15 [ 86.965708][ C1] EXT4-fs (loop3): last error at time 1775086401: ext4_do_update_inode:5602: inode 15 [ 87.107366][ T5129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.108984][ T5129] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.428: corrupted inode contents [ 87.157439][ T5129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.167471][ T5129] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.428: mark_inode_dirty error [ 87.221967][ T5129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.222205][ T5129] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.428: mark inode dirty (error -117) [ 87.347169][ T5129] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 87.363072][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 87.405392][ T5149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 87.536441][ T5149] vxlan1: entered promiscuous mode [ 87.557850][ T5149] vxlan1: entered allmulticast mode [ 87.577762][ T5129] EXT4-fs (loop3): 1 orphan inode deleted [ 87.594893][ T5129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.619406][ T28] audit: type=1400 audit(1775086402.092:469): avc: denied { bind } for pid=5153 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.739735][ T5129] netlink: 96 bytes leftover after parsing attributes in process `syz.3.428'. [ 87.810854][ T5159] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 87.939413][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 87.954954][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.047298][ T5166] ================================================================== [ 88.055628][ T5166] BUG: KCSAN: data-race in copy_mm / percpu_counter_destroy_many [ 88.063422][ T5166] [ 88.065856][ T5166] write to 0xffff888103ccbb28 of 8 bytes by task 5163 on cpu 1: [ 88.073707][ T5166] percpu_counter_destroy_many+0xc7/0x2b0 [ 88.079546][ T5166] __mmdrop+0x25d/0x3f0 [ 88.083863][ T5166] finish_task_switch+0x184/0x280 [ 88.089264][ T5166] __schedule+0x93c/0xd40 [ 88.093956][ T5166] preempt_schedule_irq+0x2d/0x50 [ 88.099080][ T5166] raw_irqentry_exit_cond_resched+0x4b/0x60 [ 88.105826][ T5166] irqentry_exit+0x91/0x520 [ 88.110826][ T5166] sysvec_apic_timer_interrupt+0x44/0x80 [ 88.116856][ T5166] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.123675][ T5166] __kcsan_check_access+0x1a7/0x1d0 [ 88.129506][ T5166] vma_start_read+0xdc/0x2c0 [ 88.134984][ T5166] lock_vma_under_rcu+0xe3/0x210 [ 88.141414][ T5166] do_user_addr_fault+0x232/0x1050 [ 88.146936][ T5166] exc_page_fault+0x62/0xa0 [ 88.152384][ T5166] asm_exc_page_fault+0x26/0x30 [ 88.157636][ T5166] [ 88.160517][ T5166] read to 0xffff888103ccb600 of 1664 bytes by task 5166 on cpu 0: [ 88.169320][ T5166] copy_mm+0xe1/0x370 [ 88.173487][ T5166] copy_process+0xe22/0x20b0 [ 88.178243][ T5166] kernel_clone+0x16b/0x5d0 [ 88.182964][ T5166] __x64_sys_clone+0x143/0x180 [ 88.187859][ T5166] x64_sys_call+0x1222/0x3020 [ 88.192591][ T5166] do_syscall_64+0x12c/0x370 [ 88.197935][ T5166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.204653][ T5166] [ 88.207078][ T5166] Reported by Kernel Concurrency Sanitizer on: [ 88.214162][ T5166] CPU: 0 UID: 0 PID: 5166 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 88.224266][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.235480][ T5166] ================================================================== [ 88.332546][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.357641][ T5163] loop4: detected capacity change from 0 to 512 [ 88.467099][ T5163] EXT4-fs: Ignoring removed nobh option [ 88.510961][ T5163] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.551287][ T5163] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.437: EA inode hash validation failed [ 88.567315][ T5163] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.437: corrupted inode contents [ 88.586281][ T5163] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #15: comm syz.4.437: mark_inode_dirty error [ 88.598893][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 88.599036][ C0] EXT4-fs (loop4): initial error at time 1775086403: ext4_do_update_inode:5602: inode 15 [ 88.599067][ C0] EXT4-fs (loop4): last error at time 1775086403: ext4_do_update_inode:5602: inode 15 [ 88.641486][ T5163] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.437: corrupted inode contents [ 88.660508][ T5163] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.437: mark_inode_dirty error [ 88.678344][ T5163] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.437: mark inode dirty (error -117) [ 88.700141][ T5163] EXT4-fs warning (device loop4): ext4_evict_inode:285: xattr delete (err -117) [ 88.738405][ T5163] EXT4-fs (loop4): 1 orphan inode deleted [ 88.758235][ T5163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.812179][ T5163] netlink: 96 bytes leftover after parsing attributes in process `syz.4.437'. [ 88.904592][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.